Privacy policy

What we collect

• Account: email, password (stored only as a one-way hash), date of birth and country.
• Profile: name, photos, bio, answers, interests, what you’re looking for, and the city or area you choose.
• Activity: likes, matches, messages, voice notes, games, date plans, events and reports you make.
• Verification: the live selfie you take for Photo Verified; if you choose ID Verified, photos of your ID document and a live selfie; for the separate 18+ After Dark site only, an ID photo. We keep the result (verified or not, the method, the date and the verification provider's reference), not the images. Your captures are encrypted, never shown on your profile, and never included in notifications or data exports. Only safety staff with a reviewer permission can open them (ID documents need a further, separate permission), and every view is logged.
• Payments: what you bought, when, and your plan's renewal date. On the website, card details go straight to our payment provider (Stripe); we never see or store them. If you subscribe in the iPhone app, Apple handles the payment and tells us only the product, dates, renewal status and a transaction number, never your card or Apple ID.
• Device: a sign-in cookie, and a push address if you switch notifications on.

Location

You pick your city or area. If you tap “Use my current location”, your browser shares your position once; we round it to about 1 km to find the nearest place and never store the coordinates. Other members only ever see your area, never an exact location.

Why we use it

• To show you to people you might like, and them to you, following your privacy settings.
• To keep people safe: checking photos, reviewing reports and stopping abuse.
• To run the features you use (chat, calls, date plans, payments) and send the notifications you switched on.

We don’t sell your data and don’t use advertising trackers. Suggestions are rules-based; nothing about you is sent to an AI service unless you ask for opener ideas and the site has one set up.

Who else sees it

Other members see your profile according to your settings. Our safety team sees what they need to review reports and verification. Service providers process data only to run Rendo: hosting, email, push notifications, video calls and payments.

How long we keep it

• Your account and profile: until you delete your account.
• Verification selfies: deleted 30 days after they’re reviewed. ID Verified captures (document photos and the selfie taken with them): deleted as soon as the check is decided; unclear photos you're asked to retake are deleted at once. After Dark ID photos: deleted as soon as our team decides. If you change your main photo or most of your photos, Photo Verified is hidden until a new selfie matches; ID Verified stays.
• Payment records: kept as long as bookkeeping law requires, without your name or email once your account is deleted.
• Reports, blocks and moderation decisions: kept after deletion so a removed account can’t return unchecked.

Your choices and rights

• Privacy settings: hide your profile, choose who sees what, manage blocks.
• Download your data at any time.
• Delete your account: your profile, photos, messages, likes, notifications and coins are removed. A membership bought on the website is cancelled at once, so you're not charged again. An App Store subscription isn't: Apple bills it, so cancel it in your iPhone's Settings → your name → Subscriptions.

Questions about your data: see Help & support.